A home Wi-Fi network is secure when four things are true: the router’s admin login is not the default, the Wi-Fi uses WPA3 or WPA2 encryption with a long passphrase, the router firmware is current, and risky features such as remote management and WPS are switched off. The steps below follow guidance from the US Federal Trade Commission (FTC) and the Cybersecurity and Infrastructure Security Agency (CISA).
1. Change the router’s admin login
The admin account controls the router’s settings, and default usernames and passwords are often printed on the device or published online. CISA advises replacing both with a long, random, unique password. The FTC adds that the router’s admin password should differ from the Wi-Fi password, and that the admin username should also be changed. CISA also notes that anyone with physical access can factory-reset a router and use the default details, so the router should sit somewhere visitors cannot reach.
2. Rename the network and set a strong Wi-Fi password
Both agencies say not to leave the default network name (SSID). The FTC recommends a unique name that does not reveal a name, address or the router brand. CISA suggests a passphrase of five to seven unrelated words, at least 16 characters, that is not reused anywhere else. This matches the UK National Cyber Security Centre’s wider advice that long passwords built from random words are easier to remember than strings of symbols, and that a password manager is a good alternative.
3. Use WPA3 or WPA2 encryption
In the router’s wireless settings, choose WPA3 Personal. If the router does not offer it, the FTC says WPA2 Personal is the fallback; CISA specifies WPA2 with AES. Both agencies say older or weaker options are not safe: open networks, WEP, WPA and WPA2 with TKIP. If a router only offers those, CISA suggests asking the internet provider for an upgrade or buying a new router.
4. Keep the firmware up to date
Router makers release firmware updates to fix security flaws. The FTC recommends checking the manufacturer’s website, registering the router to receive update notices, and finding out whether the internet provider pushes updates automatically. CISA says to turn on automatic updates if the router supports them. A router that no longer receives updates is a reason to replace it.
5. Turn off features that widen the attack surface
- Remote management: lets the router’s settings be changed over the internet. Both agencies say to turn it off unless it is needed.
- WPS (Wi-Fi Protected Setup): CISA says it makes unauthorised access more likely. The FTC also lists it among features to disable.
- UPnP: CISA says to turn it off after adding smart devices, because it can let malware spread and take control of devices.
6. Set up a guest network
A guest network has its own name and its own password. CISA recommends putting visitors, and smart-home devices that only need internet access, on it. The FTC points out two benefits: fewer people know the main Wi-Fi password, and guest devices stay off the primary network where laptops and phones hold personal files.
7. Check the built-in firewall and log out
The FTC notes most routers include a firewall and that it should be on. After changing settings, log out of the admin page. Menus vary by brand, so the router’s manual or the manufacturer’s support page has the exact steps.
Quick checklist
| Setting | Target |
|---|---|
| Admin username and password | Changed, long, unique, different from the Wi-Fi password |
| Network name | Custom, with no personal details or router brand |
| Wi-Fi passphrase | 5 to 7 unrelated words, 16+ characters (CISA) |
| Encryption | WPA3 Personal, or WPA2 with AES |
| Firmware | Current; automatic updates on if available |
| Remote management, WPS, UPnP | Off |
| Guest network | On, with its own password |
Related reading
If a laptop keeps losing the connection, Apple’s steps are summarised in Mac Wi-Fi not connecting or dropping. For the wider picture, see how to protect yourself online and how to check whether a password was leaked.
Frequently asked questions
Does hiding the network name make Wi-Fi safer? Neither agency recommends it as a protection. Their advice centres on encryption, strong passwords and updates.
How often should the Wi-Fi password change? The sources do not set a schedule. They stress using a strong, unique passphrase, and changing it if someone who should not have it has learned it.
What if the router is old? If it only supports WEP, WPA or WPA2 with TKIP, or no longer gets firmware updates, CISA advises asking the provider for an upgrade or replacing it.
Sources
- FTC Consumer Advice, How to Secure Your Home Wi-Fi Network
- CISA Project Upskill, Module 5: Securing Your Home Wi-Fi
- NCSC, Use three random words
Like our coverage? Add stepphase.com as a preferred source on Google to see more of our stories in Top Stories.
